Static task
static1
Behavioral task
behavioral1
Sample
e96c788e5e48c48424c4488a7f136369a78f7b936df27cb12f705fb621b16fc9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e96c788e5e48c48424c4488a7f136369a78f7b936df27cb12f705fb621b16fc9.exe
Resource
win10v2004-20220812-en
General
-
Target
e96c788e5e48c48424c4488a7f136369a78f7b936df27cb12f705fb621b16fc9
-
Size
442KB
-
MD5
067be23d2e52283ad66e63691a5aa5f1
-
SHA1
496523eab73c5a80793d045a47c3fe9cc4a71498
-
SHA256
e96c788e5e48c48424c4488a7f136369a78f7b936df27cb12f705fb621b16fc9
-
SHA512
f65e272562ffbe9be14a5371cac6b04253616016c40ad1d1a4efd7695b748dfffd10d17cf28758710d567d9adfc59f87d93b76a82c9d31aee75be502612effe3
-
SSDEEP
6144:ayfwXtLNyiFY+A1NVEfE7G6NgREGA2t/glDErdZMLM/bpClbHbpHbz:FwXtpych++fE7GOgREGrt4l4Vo
Malware Config
Signatures
Files
-
e96c788e5e48c48424c4488a7f136369a78f7b936df27cb12f705fb621b16fc9.exe windows x86
1c372311534116eeffdf56f3f6c69c5c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
ExitProcess
GetProcAddress
user32
wsprintfA
MessageBoxA
Sections
CODE Size: 214KB - Virtual size: 496KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 215KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.psgl Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE